Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/v9SdGCEbNFlSuDgWgo1kf6nL3As.roa
File: v9SdGCEbNFlSuDgWgo1kf6nL3As.roa (raw, json)
Hash identifier: qiXG0Rmw4yiW0AhRjg9/OTIgPd0soD+OwXQ8XH+CjYg=
Subject key identifier: BF:D4:9D:18:21:1B:34:59:52:B8:38:16:82:8D:64:7F:A9:CB:DC:0B
Certificate issuer: /CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
Certificate serial: 019421442164CE775CD0A1ED44739232EE24
Authority key identifier: F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/v9SdGCEbNFlSuDgWgo1kf6nL3As.roa
Signing time: Wed 01 Jan 2025 09:48:20 +0000
ROA not before: Wed 01 Jan 2025 09:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35609
IP address blocks: 193.239.40.0/22 maxlen: 23
2001:67c:4c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:21:64:ce:77:5c:d0:a1:ed:44:73:92:32:ee:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
Validity
Not Before: Jan 1 09:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfd49d18211b345952b83816828d647fa9cbdc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:97:ca:e2:19:9b:3b:a1:c8:91:b1:d6:95:0e:
76:31:c5:94:fc:20:49:e6:7f:a9:8f:3b:6c:ac:fe:
d4:33:af:31:2c:9d:6b:7b:ca:d3:ce:fe:3f:6e:0a:
e3:53:f7:dc:b8:74:0f:d2:ce:d6:bc:6b:57:9f:32:
e6:3c:84:10:2a:ba:e1:ce:79:04:31:b9:88:9d:8f:
d7:00:0f:d2:3e:5e:50:68:89:fe:d0:38:0c:0b:69:
0b:bb:6e:99:b6:f1:71:a9:1b:e9:58:94:6c:bc:93:
cb:a0:7b:9d:4b:a4:0b:8e:6f:5a:ab:2d:73:8e:05:
02:c9:a7:5a:4f:85:0d:1c:87:9e:ce:b8:8c:63:ea:
83:88:dc:9c:9b:6b:15:69:6f:c0:f3:41:f4:03:3e:
4b:39:0d:18:a8:7a:e4:79:71:eb:c9:f3:ea:7b:58:
b7:53:04:63:f3:3c:96:8f:fc:47:ae:19:e6:4d:e5:
0d:14:08:28:d9:76:a5:02:e0:7e:c3:77:05:0a:a8:
60:47:bc:c1:1b:a9:51:62:07:ec:e7:45:f6:ad:54:
41:37:c8:07:9f:01:47:c3:7e:b8:0b:ee:a2:ff:ba:
76:00:89:12:b8:95:0e:30:6c:6c:c9:b2:7a:51:d9:
3a:4c:8a:9b:c1:3e:f7:ee:65:7e:c5:5d:7f:40:af:
d3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D4:9D:18:21:1B:34:59:52:B8:38:16:82:8D:64:7F:A9:CB:DC:0B
X509v3 Authority Key Identifier:
keyid:F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/v9SdGCEbNFlSuDgWgo1kf6nL3As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.40.0/22
IPv6:
2001:67c:4c::/48
Signature Algorithm: sha256WithRSAEncryption
7b:64:18:26:ff:9e:30:80:cd:cb:a3:78:d0:5d:c7:1c:72:72:
53:a7:31:98:9e:6e:f6:63:fc:a8:6a:60:03:14:71:62:09:c9:
f1:7d:c7:8f:7e:e0:d3:6f:31:70:5a:38:c8:56:a5:ce:e7:5b:
36:9f:1e:a8:69:df:35:21:32:cb:36:6e:2d:91:97:94:0a:bb:
84:5a:51:a2:76:64:ff:3d:cd:5f:1f:f6:33:b7:73:db:55:89:
c4:ac:c8:b0:37:68:e5:04:af:e5:22:61:3e:f0:63:23:8c:47:
cc:84:4a:b5:15:1e:44:6d:03:0f:f2:cc:77:50:89:52:18:c5:
6a:40:d9:57:e3:31:8a:37:5f:e4:52:69:5e:cb:61:cd:bd:30:
fe:83:5f:15:3b:f7:ad:45:73:21:5c:87:b1:54:f7:1f:9a:25:
e1:5a:7b:4b:14:1e:25:68:f0:a4:c0:41:83:3a:66:26:d9:eb:
d4:a9:06:2b:a0:04:fa:86:e9:a8:9b:5d:70:84:85:36:5d:a6:
3d:6e:34:e3:07:70:6b:8b:09:6b:47:b7:d4:09:e2:24:74:7f:
b3:fa:12:10:14:41:31:e6:8c:27:5a:98:0c:42:e4:7f:62:e6:
fc:42:06:e1:39:38:03:af:b9:03:57:87:55:30:a3:cb:af:be:
bf:3a:46:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:56:17 2025 by rpki-client